Executive brief
OpenShell is a deployment and configuration management tool that includes a mirror mode for syncing workspace files. An attacker with access to mirror mode can exploit untrusted sandbox files to create malicious workspace hooks that execute arbitrary code on the host system during gateway startup. This requires the victim to have workspace hooks explicitly enabled and to restart the gateway after the attack.
Technical details
The vulnerability is a CWE-829 (Inclusion of Functionality from Untrusted Control Sphere) that allows conversion of untrusted sandbox files into workspace hooks in OpenShell mirror mode. The attack requires: (1) attacker access to mirror mode functionality, (2) workspace hooks explicitly enabled on the target, (3) victim interaction to trigger a gateway restart. When these conditions are met, an attacker can execute arbitrary code with the privileges of the OpenShell process on the host system. The vulnerability affects OpenShell versions up to 2026.3.24; it was patched in version 2026.3.28 (commit c02ee8a3a4cb390b23afdf21317aa8b2096854d1).
Affected products
- OpenClaw OpenShell <=2026.3.24
Timeline
- 2026-03-31: disclosed: Advisory published as GHSA-42mx-vp8m-j7qh
- 2026-03-25: patched: Fix commit c02ee8a3a4cb390b23afdf21317aa8b2096854d1 merged
- 2026-05-04: other: Duplicate advisory GHSA-m563-373q-885c withdrawn